DNSCrypt is a tool that can encrypt DNS traffic to protect against eavesdropping and man in the middle attacks over the 'last mile'.

The tool is developed to be used with OpenDNS, the most secure DNS service available. It can automatically change your network settings to enable OpenDNS on your system, and while active, it will encrypt DNS traffic to protect it against some known weaknesses in DNS.

Specifically, it protects your DNS information over the "last mile" of your connection, which is the portion of your Internet connection between your computer and your ISP. DNS traffic has been demonstrated to be vulnerable to snooping, tampering and eavesdropping over this "last mile", and in an era of open public wifi networks and so on, this is a very useful tool for the privacy- and security-conscious.